Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/3133312e3130302e33322e302f32322d3332203d3e203631373436.roa
File:                     3133312e3130302e33322e302f32322d3332203d3e203631373436.roa (raw, json)
Hash identifier:          ykIuYWhEOec8YH4nHl4IFyXx4p+7K38q5aecP8JZ6CE=
Subject key identifier:   61:DE:69:50:40:07:CB:2D:AD:CF:C9:37:2D:30:15:22:76:05:A8:DE
Certificate issuer:       /CN=1C08F161D05B2B854FDA7F58471297A3DE6844FC
Certificate serial:       1661504992AD65428D18DC4E2F12B0C19AA73B7B
Authority key identifier: 1C:08:F1:61:D0:5B:2B:85:4F:DA:7F:58:47:12:97:A3:DE:68:44:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/3133312e3130302e33322e302f32322d3332203d3e203631373436.roa
Signing time:             Thu 04 Apr 2024 09:43:41 +0000
ROA not before:           Thu 04 Apr 2024 09:38:41 +0000
ROA not after:            Thu 03 Apr 2025 09:43:41 +0000
asID:                     61746
IP address blocks:        131.100.32.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.crl
                          rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:61:50:49:92:ad:65:42:8d:18:dc:4e:2f:12:b0:c1:9a:a7:3b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C08F161D05B2B854FDA7F58471297A3DE6844FC
        Validity
            Not Before: Apr  4 09:38:41 2024 GMT
            Not After : Apr  3 09:43:41 2025 GMT
        Subject: CN=61DE69504007CB2DADCFC9372D3015227605A8DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:14:c0:a0:6f:97:03:7c:f1:1d:0c:18:73:
                    ce:8f:54:23:ad:79:42:03:d0:4c:ba:00:1c:9b:25:
                    ef:26:02:5b:31:21:98:87:4f:0c:7f:49:65:3f:1c:
                    d5:5a:fd:00:d5:60:81:70:60:8a:14:1c:9d:28:d2:
                    0b:a0:65:79:48:92:c9:d0:45:9f:52:77:a4:62:fe:
                    5e:e5:49:8a:a7:7f:9f:a1:f8:08:5a:fa:99:f5:f7:
                    9b:12:55:a2:7d:88:3b:7b:a5:5c:af:8e:fb:d2:4e:
                    81:96:99:8e:47:d4:1f:cc:bd:3d:cb:26:37:1a:d0:
                    3b:cc:d2:ab:d6:f6:eb:e9:da:cd:e1:44:4c:06:6b:
                    09:76:59:92:a0:9d:9f:f6:7f:b7:d2:9b:9a:06:9b:
                    e5:37:e3:d6:75:99:16:23:c9:59:09:66:e3:be:8c:
                    e7:f8:b2:c5:62:83:02:cf:1f:a7:f5:1f:6e:f3:5c:
                    8b:b9:ca:1f:87:4e:08:97:11:dc:54:db:5d:3e:aa:
                    11:3e:88:fe:92:f3:be:b7:ec:59:d7:3f:c6:37:a1:
                    10:18:6d:de:e1:76:41:2c:fa:18:04:45:90:68:35:
                    03:4f:2c:28:70:83:91:c0:b6:c4:db:38:6e:c0:3c:
                    21:fa:16:05:d4:b2:b5:14:de:07:4c:cd:7d:55:bf:
                    fc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DE:69:50:40:07:CB:2D:AD:CF:C9:37:2D:30:15:22:76:05:A8:DE
            X509v3 Authority Key Identifier:
                keyid:1C:08:F1:61:D0:5B:2B:85:4F:DA:7F:58:47:12:97:A3:DE:68:44:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/3133312e3130302e33322e302f32322d3332203d3e203631373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:24:74:43:6f:50:cb:1d:14:5c:89:4e:e0:d2:13:59:c0:9b:
         0e:f1:9b:fe:ff:e6:66:0f:1c:ca:ff:d6:78:89:2b:e3:91:2c:
         55:5f:79:da:fa:79:cc:0f:50:0b:56:83:46:b5:2c:e1:29:37:
         53:85:5d:ec:64:9a:2d:1e:76:77:fd:a5:1d:da:0b:28:a9:cb:
         d0:f8:c9:f0:41:e5:d5:61:00:30:3b:8d:67:8f:6e:d8:3f:e7:
         8e:28:50:e4:af:63:6e:30:c5:67:e6:57:2d:35:83:b0:8e:d6:
         11:0e:a7:3e:9c:df:80:1e:97:d0:93:47:a2:76:cf:aa:23:52:
         7a:2a:2a:c6:f6:b9:40:07:05:99:8c:71:d1:d8:da:50:13:84:
         84:49:41:f5:d6:a9:d7:de:af:de:84:2d:2e:3f:5e:24:d7:69:
         d9:c1:65:ca:e6:64:12:d8:20:f9:81:d6:bb:29:8c:73:9a:17:
         e8:52:98:b3:09:1a:10:1e:28:18:0b:cd:77:32:01:2c:63:9b:
         cb:0b:8c:c4:ac:61:22:34:6d:a2:44:0f:c0:2f:87:de:ac:a0:
         b1:c1:1c:e1:57:da:c2:f1:58:dc:1c:3d:10:a9:3a:3c:da:2f:
         96:34:c3:97:8e:8a:19:fd:7b:21:fa:d5:3b:8b:98:b9:83:b1:
         f8:e0:f4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:28:01 2024 by rpki-client on console-ams.rpki-client.org